Public Safety committee  Mr. Chair, that's a great question. What I'm talking about is small and medium-sized enterprises and protecting them, as opposed to critical infrastructure providers that are defined in the act. It allows you to take federal jurisdiction by using your tax power to protect the co

Public Safety committee  I'd leave the sanctions in place. Your point is a good one. There's almost an internal inconsistency in the bill, because they say that the administrative monetary penalties are to encourage compliance, but those penalties can be up to $15 million a day. This is not meant to be p

Public Safety committee  Again, it's a great question, Mr. Chair. I'm personally a bit unconvinced by the regulatory burden argument. All the bill is saying is that if you work in critical infrastructure, you need to have a plan in place. You need to have a cybersecurity plan. The opposite of that is no

Public Safety committee  There are two or three different reasons. The first is that it allows CSE or the Cyber Centre to take action. The problem is that many of the critical sectors are targeted by state-level actors, and I've got news for you: If someone swipes in with a military badge on the other

Public Safety committee  Thank you, Mr. Chair. Members of the standing committee, ladies and gentlemen, I thought what I could do with my brief time today is offer you a little bit of advice and make you a good faith offer. What I'm going to do is maybe make a general observation. I think the bill is

National Defence committee  Sure. I'll just see if the translators are able to pick me up now. Not at all?

National Defence committee  That's a very good question. Indeed, senior members of the Ukrainian government have called for the offensive cyber-activities in the Ukraine to be considered war crimes. At present, it's likely not, but certainly it's not necessarily something that—

National Defence committee  Is it possible to interpret now, if I speak slowly?

National Defence committee  That could be the subject of a Ph.D. dissertation. I would say, to read all the terms of service that you've agreed to all year, there is some estimate that it would take the average individual something like 200 days. I think the broader point is that we have built our entire

National Defence committee  There is traditional cybersecurity, which is usually unauthorized access to systems and data. What you're talking about—and I really liked the question—goes a bit deeper, to societal resilience. We're talking about people and people's views of the world. When we think about dis

National Defence committee  Thank you very much, Chair. Thank you very much to the committee for having me. I'm honoured to appear before you today to discuss the critical issue of cybersecurity and the capabilities of foreign actors. To effectively address the issue, I believe the government should take

Public Safety committee  I would just come back to my broad observation that we tend to do things in a siloed format. There's this policy framework, the defence policy, the national security strategy, the innovation policy.... We need to look at this holistically because it's all connected. The reason

Public Safety committee  Dr. Wark and I are going to submit a brief to the committee. I'll submit a disinformation “kill chain”. It shows exactly how it works and how the campaigns are formulated. We'll offer specific recommendations on how I think we can intervene, because it's not helpful, that's for s

Public Safety committee  It rings a bell. I couldn't cite a chapter and verse right now, though.

Public Safety committee  I think it depends on how you scope it, and I appreciated your questions to the previous witnesses. I'm not an expert in it, so I don't want to steer you in the wrong direction, but I think that, obviously, foreign influence is a bad thing. We have to be on top of it, but there